Privacy Policy

1. Who We Are

Tech Serenity IT ("we", "our", or "us") is an IT solutions company based in Al Maabela, Muscat, Oman. We operate the website https://techserenityit.com and the Invoicer web application available at /invoicer.

For any privacy-related questions, contact us at [email protected].

2. Information We Collect

2.1 Information You Provide

• Account registration: When you sign up for an Invoicer account, we collect your name and email address.
• Google Sign-In: If you sign in with Google, we receive your name, email address, and profile picture from Google.
• Invoice data: Business names, client details, and line items you enter into invoices are stored in your private account (when signed in). Guest invoices are stored only in your browser and not on our servers.
• Contact form: If you contact us, we collect your name, email, and message content.

2.2 Automatically Collected Information

• Usage data: Pages visited, features used, browser type, and approximate location (country/city) via Google Analytics.
• Session tokens: A random 64-byte session token is stored in Cloudflare KV with a 30-day expiry when you sign in. This is used to authenticate API requests.
• Local storage: Your invoice drafts, preferred template, font, currency, and background colour are stored in your browser's localStorage and never sent to our servers unless you are signed in.

3. How We Use Your Information

• To create and maintain your Invoicer account.
• To save and retrieve your invoices across devices (signed-in users only).
• To send transactional emails if requested (e.g., invoice emails sent via your own email client).
• To analyse website usage and improve our services via Google Analytics.
• To display relevant advertisements via Google AdSense and other advertising partners.
• To respond to support enquiries.
• To comply with legal obligations.

4. Cookies and Tracking Technologies

We use cookies and similar technologies for the following purposes:

5. Sharing Your Information

We do not sell your personal information. We share data only in these limited circumstances:

• Service providers: Cloudflare (hosting, database, KV storage), Google (Analytics, OAuth, AdSense). These providers are contractually bound to protect your data.
• Legal requirements: If required by law, court order, or governmental authority.
• Business transfers: In the event of a merger or acquisition, your data may be transferred as part of that transaction.

6. Data Retention

• Account data and invoices are retained for as long as your account is active.
• Session tokens expire after 30 days of inactivity.
• Guest invoice data exists only in your browser's localStorage and is removed when you clear your browser data.
• You can delete your invoices at any time from the dashboard. To request full account deletion, email us at [email protected].

7. Your Rights

Depending on your location, you may have the right to:

• Access the personal data we hold about you.
• Correct inaccurate data.
• Request deletion of your data.
• Object to or restrict certain processing.
• Withdraw consent at any time (where processing is based on consent).

To exercise any of these rights, please email us at [email protected]. We will respond within 30 days.

8. Security

We take reasonable technical and organisational measures to protect your data, including:

• HTTPS encryption for all data in transit.
• PBKDF2 password hashing (100,000 iterations, SHA-256) for email/password accounts.
• Per-user database tables ensuring your invoice data is isolated from other users.
• Session tokens stored in Cloudflare KV with automatic 30-day expiry.

No method of transmission over the internet is 100% secure. We cannot guarantee absolute security.

9. Children's Privacy

Our services are not directed to children under the age of 13. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us so we can delete it.

10. Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices of those sites and encourage you to review their privacy policies.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by updating the "Last updated" date at the top of this page. Continued use of our services after changes constitutes acceptance of the updated policy.

12. Governing Law

This Privacy Policy is governed by the laws of the Sultanate of Oman. Any disputes will be resolved in the courts of Muscat, Oman.